This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmhu6fLZNJOABw7Tau8MJvcDDPc.roa File: nmhu6fLZNJOABw7Tau8MJvcDDPc.roa (raw, json) Hash identifier: aRw9R2AcB9/qkUP7vGqXfkIsXS6yu4WCBxdB7V1ucsM= Subject key identifier: 9E:68:6E:E9:F2:D9:34:93:80:07:0E:D3:6A:EF:0C:26:F7:03:0C:F7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844E9429C71D0ED4F8E3ABB341094E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmhu6fLZNJOABw7Tau8MJvcDDPc.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6698 IP address blocks: 31.56.59.0/24 maxlen: 24 31.59.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4e:94:29:c7:1d:0e:d4:f8:e3:ab:b3:41:09:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e686ee9f2d9349380070ed36aef0c26f7030cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:ed:05:72:c6:35:77:ac:51:4d:2c:fb:44: f0:4f:0f:93:50:12:14:9a:4e:e8:cd:2e:24:35:48: e1:45:f6:64:f5:8c:64:52:e3:31:72:1a:0c:a0:fc: 1d:97:30:c0:cb:08:c8:ac:ea:04:4d:a9:f3:98:2c: d3:06:60:de:bf:df:76:13:13:6d:1c:a9:8c:10:2c: 4b:66:93:fc:ff:15:2e:c5:9d:ed:0b:f5:c8:4a:f2: dc:14:b7:ce:46:19:20:11:31:2e:28:1f:62:82:ed: 0a:1f:4b:43:77:a2:29:6f:90:15:69:fe:ab:67:03: 4c:fe:62:95:78:61:ab:cc:26:50:54:48:25:97:b4: fe:7a:ec:96:63:b9:89:88:e4:5b:16:e4:a0:2e:41: 2a:a4:53:f5:a7:16:1b:34:c2:d5:9d:ef:fd:81:82: 02:b2:93:d8:4f:6e:53:f1:bd:e1:3f:70:95:7e:db: 55:c3:39:ab:c2:57:f3:de:b4:d3:5e:60:9d:68:d5: 8b:fb:75:8e:2f:7f:92:1a:97:5b:b4:c9:dc:0e:e1: 9d:9b:89:d8:55:e8:39:14:de:2c:2a:50:b9:f0:c5: a3:fc:3d:0d:31:65:9d:62:bc:3b:15:11:53:1f:d4: f8:a6:8a:2f:3b:db:61:9a:24:2f:a7:8e:18:3a:fe: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:68:6E:E9:F2:D9:34:93:80:07:0E:D3:6A:EF:0C:26:F7:03:0C:F7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nmhu6fLZNJOABw7Tau8MJvcDDPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.59.0/24 31.59.128.0/24 Signature Algorithm: sha256WithRSAEncryption 67:12:7d:8c:50:c8:23:ab:55:b4:cc:76:ae:10:18:76:c9:d9: 38:08:40:6a:a5:d4:be:7d:ff:cd:fd:9d:f5:ba:c5:c4:41:b4: 0c:59:d1:04:34:d7:e3:d5:20:84:71:21:2f:a1:3b:8a:05:37: 89:8b:99:52:25:b3:00:61:31:dc:20:11:24:99:20:5c:de:fb: ac:76:78:53:be:9a:ec:92:a9:9b:13:90:d5:c9:c8:ff:4a:08: 2b:6b:61:b3:9d:4c:82:3f:d2:f8:f9:69:20:ec:38:46:d4:92: 9c:ca:e2:4a:47:91:56:fc:05:46:57:7f:25:bb:ea:db:25:3c: 02:66:ee:73:f0:77:82:01:f9:7b:88:23:8d:53:7a:89:0c:d6: e8:28:84:ae:0d:58:6f:16:43:11:bb:6a:f9:15:b6:b3:65:11: ed:b5:27:b8:96:98:8b:0f:e7:39:ce:eb:9f:d5:5d:e3:55:18: 44:c5:3c:a8:79:04:e5:23:0d:b9:49:44:7f:37:d4:6d:33:cc: 28:ab:73:e2:62:87:ff:e4:92:81:3c:47:16:b6:59:0c:d2:3e: 6b:76:19:5c:06:94:eb:5d:5e:d2:2a:2d:6c:a7:c9:15:97:33: 98:39:aa:cf:24:23:be:3a:89:db:e2:77:c7:33:32:76:b2:42: bb:3b:95:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hE6UKccdDtT446uzQQlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTY4NmVlOWYyZDkzNDkzODAwNzBlZDM2YWVmMGMyNmY3MDMwY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhvtBXLGNXesUU0s+0TwTw+TUBIU mk7ozS4kNUjhRfZk9YxkUuMxchoMoPwdlzDAywjIrOoETanzmCzTBmDev992ExNt HKmMECxLZpP8/xUuxZ3tC/XISvLcFLfORhkgETEuKB9igu0KH0tDd6Ipb5AVaf6r ZwNM/mKVeGGrzCZQVEgll7T+euyWY7mJiORbFuSgLkEqpFP1pxYbNMLVne/9gYIC spPYT25T8b3hP3CVfttVwzmrwlfz3rTTXmCdaNWL+3WOL3+SGpdbtMncDuGdm4nY Veg5FN4sKlC58MWj/D0NMWWdYrw7FRFTH9T4poovO9thmiQvp44YOv4/6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ5obuny2TSTgAcO02rvDCb3Awz3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbm1odTZmTFpOSk9BQnc3VGF1OE1KdmNERFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzg7AwQA HzuAMA0GCSqGSIb3DQEBCwUAA4IBAQBnEn2MUMgjq1W0zHauEBh2ydk4CEBqpdS+ ff/N/Z31usXEQbQMWdEENNfj1SCEcSEvoTuKBTeJi5lSJbMAYTHcIBEkmSBc3vus dnhTvprskqmbE5DVycj/Sggra2GznUyCP9L4+Wkg7DhG1JKcyuJKR5FW/AVGV38l u+rbJTwCZu5z8HeCAfl7iCONU3qJDNboKISuDVhvFkMRu2r5FbazZRHttSe4lpiL D+c5zuuf1V3jVRhExTyoeQTlIw25SUR/N9RtM8woq3PiYof/5JKBPEcWtlkM0j5r dhlcBpTrXV7SKi1sp8kVlzOYOarPJCO+Oonb4nfHMzJ2skK7O5Uf -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:07 2026 by rpki-client